9.8
CVE-2021-39070
- EPSS 0.67%
- Published 02.02.2022 12:15:08
- Last modified 21.11.2024 06:18:32
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an attacker to authenticate as any user on the system. IBM X-Force ID: 215353.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Security Verify Access Version10.0.0
Ibm ≫ Security Verify Access Version10.0.1.0
Ibm ≫ Security Verify Access Version10.0.2.0
Ibm ≫ Security Verify Access Docker Version10.0.0
Ibm ≫ Security Verify Access Docker Version10.0.1.0
Ibm ≫ Security Verify Access Docker Version10.0.2.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.67% | 0.69 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
| psirt@us.ibm.com | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|